个人网页/login.aspx.cs

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Configuration;
using System.Data;
using System.Data.SqlClient;
using System.Data.Sql;
using System.Web.Security;


namespace 个人网页
{
    public partial class login1 : System.Web.UI.Page
    {
        protected void Page_Load(object sender, EventArgs e)
        {
        }
        protected void imgbtnEnter_Click(object sender, ImageClickEventArgs e)
        {
            if (Validator.Text.Trim().ToUpper() != Session["CheckCode"].ToString().ToUpper())
            {
                lblMessage.Text = "验证码有误，请检查！";
            }
            else 
            {               
                    string username;
                    string password;
                    string MdPswdStr = FormsAuthentication.HashPasswordForStoringInConfigFile(UserPwd.Text, "MD5");
                    username = UserName.Text;
                    password = MdPswdStr;
                    if (username.Equals("") || password.Equals(""))
                    {
                        Response.Write(
                            "<script language=javascript>alert('会员名和密码不能为空！');location='javascript:history.go(-1)'</script>");
                    }
                    SqlConnection myconn = new SqlConnection(ConfigurationSettings.AppSettings["ConnStr"]);
                    string strsql = "select * from Users where UserName=@name and Password=@pass";
                    myconn.Open();
                    SqlCommand comm = new SqlCommand(strsql, myconn);
                    comm.Parameters.Add(new SqlParameter("name", SqlDbType.NVarChar, 50));
                    comm.Parameters["name"].Value = username;
                    comm.Parameters.Add(new SqlParameter("pass", SqlDbType.NVarChar, 50));
                    comm.Parameters["pass"].Value = password;
                    SqlDataReader dr = comm.ExecuteReader();
                    if (dr.Read())
                    {
                        Session["username"] = username;
                    
                        string sql = "select count(*) from Users where UserName='" + username + "'";
                       
                        DBConnection mydb = new DBConnection();
                        
                        if (mydb.ExecScalar(sql) > 0)
                        {
                            Response.Redirect("Default.aspx");
                        
                        }